This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/lDMKh21Wt4FbbKS1OgeKAWJLOUA.roa File: lDMKh21Wt4FbbKS1OgeKAWJLOUA.roa (raw, json) Hash identifier: 3L7WTrIU7aPDIrcLzqUSb6E2nzrLgIJ/FaZM9uhhyxA= Subject key identifier: 94:33:0A:87:6D:56:B7:81:5B:6C:A4:B5:3A:07:8A:01:62:4B:39:40 Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34 Certificate serial: 019B7CEE00EF9C3D281891811749F0C240B6 Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/lDMKh21Wt4FbbKS1OgeKAWJLOUA.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198432 IP address blocks: 2a00:e9c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:00:ef:9c:3d:28:18:91:81:17:49:f0:c2:40:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94330a876d56b7815b6ca4b53a078a01624b3940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:7e:46:41:59:d1:73:e2:7a:a5:7f:a5:de: 9e:17:33:ae:24:d6:b4:75:18:2f:b3:98:49:b1:0d: f9:e9:d4:a0:0c:98:d3:3a:74:3b:19:be:14:b0:b4: 9f:ef:55:f2:32:d4:fd:dd:e0:3f:e6:11:ed:26:6f: 29:90:63:19:6c:fd:96:6e:18:e8:15:1d:c6:03:66: 6f:2d:22:5b:5d:87:43:da:4f:0f:29:42:f3:64:7f: 57:7e:c8:d7:07:05:5b:25:a6:98:99:df:5b:89:4e: 9c:cc:a7:c8:80:53:87:9c:1a:47:f5:df:ba:70:a2: 4f:84:ef:1b:2d:b4:62:1f:5d:36:e1:7a:96:99:24: a7:e7:13:51:06:61:7f:b4:b1:d2:ab:41:a4:f2:8b: 2f:49:42:8b:9c:12:0d:17:12:e1:7d:ee:be:77:fe: 2a:1d:fa:c8:91:9b:5b:9b:67:ba:59:47:1d:5a:9b: 76:9c:be:db:0c:27:97:02:1f:48:04:15:9a:3d:a6: 16:5c:ff:50:59:b0:98:83:b2:52:d6:ec:86:93:a5: 88:b9:61:88:06:e3:bc:1d:b8:fd:f2:60:c2:71:1a: da:22:64:c5:3b:39:36:56:b2:8d:34:bf:f0:aa:d1: 52:a9:7b:b7:4e:90:4c:26:64:06:85:6a:bb:66:14: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:33:0A:87:6D:56:B7:81:5B:6C:A4:B5:3A:07:8A:01:62:4B:39:40 X509v3 Authority Key Identifier: keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/lDMKh21Wt4FbbKS1OgeKAWJLOUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:e9c0::/32 Signature Algorithm: sha256WithRSAEncryption 37:0a:86:5a:58:8f:2a:06:25:50:71:1c:1e:e0:a1:64:ce:c7: 7c:63:5a:76:d2:42:39:7d:f6:8f:65:d8:f4:a4:88:50:78:58: 3a:d8:2b:88:bd:7c:e9:06:7d:b0:67:75:f8:7f:2f:e2:e2:c0: 23:0f:d9:ec:09:da:70:50:b4:54:55:e1:c7:f4:89:25:9b:c7: 0e:5b:44:e1:98:21:82:19:0d:c7:68:3e:e7:80:83:e5:b7:04: c1:f9:ef:b2:bd:da:72:e5:74:b9:13:ac:f5:d7:60:bd:7a:4a: ec:b9:28:2d:0e:15:a2:93:e3:ec:bc:8f:a5:7c:f5:36:13:f2: 2f:7c:40:3f:49:ea:a1:e9:42:d7:51:87:58:bd:dd:7a:3d:48: db:08:ef:a3:79:08:31:d7:65:ae:1a:76:58:a0:5e:d5:0e:32: cb:a1:2b:18:55:ce:0c:e8:9b:ca:81:17:a2:b3:1f:7b:5b:54: d9:2b:aa:bd:a5:15:98:19:12:d5:e6:9a:59:2a:70:e2:72:1e: f5:15:16:73:e9:45:ad:9e:f1:c8:96:38:b7:f0:66:ff:e9:db: 00:01:60:7a:b2:c3:2b:8f:f0:95:97:08:d8:8a:8b:d7:d9:ea: cf:72:cf:ff:7d:54:0c:be:da:59:44:93:fb:66:2b:a0:54:3f: be:c2:a5:36 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87gDvnD0oGJGBF0nwwkC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTVkMzMzZGFkOWQ2MmQ1MzI4ZDEyNTc4YTMxZGVmNDJh ZjhmMzQwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDMzMGE4NzZkNTZiNzgxNWI2Y2E0YjUzYTA3OGEwMTYyNGIzOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qF+RkFZ0XPieqV/pd6eFzOuJNa0 dRgvs5hJsQ356dSgDJjTOnQ7Gb4UsLSf71XyMtT93eA/5hHtJm8pkGMZbP2Wbhjo FR3GA2ZvLSJbXYdD2k8PKULzZH9XfsjXBwVbJaaYmd9biU6czKfIgFOHnBpH9d+6 cKJPhO8bLbRiH1024XqWmSSn5xNRBmF/tLHSq0Gk8osvSUKLnBINFxLhfe6+d/4q HfrIkZtbm2e6WUcdWpt2nL7bDCeXAh9IBBWaPaYWXP9QWbCYg7JS1uyGk6WIuWGI BuO8Hbj98mDCcRraImTFOzk2VrKNNL/wqtFSqXu3TpBMJmQGhWq7ZhRtTwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJQzCodtVreBW2yktToHigFiSzlAMB8GA1UdIwQY MBaAFEfl0zPa2dYtUyjRJXijHe9Cr480MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1YVE05cloxaTFUS05FbGVLTWQ3MEt2anpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kNjYxZDQtYzYyNC00YTBjLTkwNjkt MzUyY2ZjMzY5ZWYzLzEvbERNS2gyMVd0NEZiYktTMU9nZUtBV0pMT1VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kNjYxZDQtYzYyNC00YTBjLTkwNjktMzUyY2ZjMzY5ZWYz LzEvUi1YVE05cloxaTFUS05FbGVLTWQ3MEt2anpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgDpwDAN BgkqhkiG9w0BAQsFAAOCAQEANwqGWliPKgYlUHEcHuChZM7HfGNadtJCOX32j2XY 9KSIUHhYOtgriL186QZ9sGd1+H8v4uLAIw/Z7AnacFC0VFXhx/SJJZvHDltE4Zgh ghkNx2g+54CD5bcEwfnvsr3acuV0uROs9ddgvXpK7LkoLQ4VopPj7LyPpXz1NhPy L3xAP0nqoelC11GHWL3dej1I2wjvo3kIMddlrhp2WKBe1Q4yy6ErGFXODOibyoEX orMfe1tU2SuqvaUVmBkS1eaaWSpw4nIe9RUWc+lFrZ7xyJY4t/Bm/+nbAAFgerLD K4/wlZcI2IqL19nqz3LP/31UDL7aWUST+2YroFQ/vsKlNg== -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:38 2026 by rpki-client